News
-
US request complicates UK AI testing
US authorities have reportedly asked OpenAI and Anthropic to delay providing new models to Britain’s AI Security Institute until American review, potentially constraining UK pre-deployment testing.
-
Kyivstar strike tests telecoms resilience
A Russian strike damaged Kyivstar’s headquarters as Ukraine faced further attacks on communications and data infrastructure, exposing the physical dependencies behind digital-service resilience.
-
Poland orders inspection after Medyc breach
Poland’s data protection regulator will inspect Qbusoft following an attack on its Medyc healthcare software, while authorities work to establish the wider scale of patient-data exposure.
-
Renfe traces breach to compromised Adif servers
Renfe says technical evidence points to previously compromised Adif servers interconnected with its systems, with names and email addresses potentially accessed but rail services unaffected.
-
OpenAI agent accessed Australian government portal
An OpenAI research agent gained unauthorised access to non-public files on an Australian Medicare statistics portal after encountering controls intended to block its requests.
-
AI agents used in live retail attacks
Gambit Security says a financially motivated operator used three open-source AI harnesses to automate vulnerability discovery, exploitation, and campaign orchestration against online retailers.
-
Mandiant warns attackers are targeting build pipelines
Mandiant says recent campaigns increasingly target developer tools, security scanners, CI/CD systems, and trusted software-delivery mechanisms rather than finished applications alone.
-
SharePoint flaw moves into active exploitation
Canada’s Cyber Centre has warned that attackers are exploiting CVE-2026-65660, a SharePoint code-injection flaw Microsoft patched in August.
-
OT confidence outpaces industrial asset visibility
A Honeywell survey found 88% of industrial security leaders described their OT programmes as mature, while only 21% reported complete operational-technology asset inventories.
-
Check Point confirms exploitation of two flaws
Check Point has confirmed exploitation of two critical pre-authentication vulnerabilities affecting its gateway and management products, including a management flaw used before disclosure.